AWS IAM documentation change
Summary
Corrected grammatical errors and formatting in the section about delivering temporary credentials to workloads outside AWS, including fixing 'run on outside' to 'run outside' and removing duplicate 'AWS' in API references.
Security assessment
These are minor editorial fixes that improve clarity but do not address any security vulnerabilities, weaknesses, or incidents. They do not add new security documentation or features.
Diff
diff --git a/IAM/latest/UserGuide/best-practices.md b/IAM/latest/UserGuide/best-practices.md index c0dff9cfd..e6cbe55c8 100644 --- a//IAM/latest/UserGuide/best-practices.md +++ b//IAM/latest/UserGuide/best-practices.md @@ -60 +60 @@ When you're building on an AWS compute service, such as Amazon EC2 or Lambda, AW -Workloads that run on outside of AWS, such as your on-premises servers, servers from other cloud providers, or managed continuous integration and continuous delivery (CI/CD) platforms, can still use temporary credentials. However, you'll need to deliver these temporary credentials to your workload. The following are ways you can deliver temporary credentials to your workloads: +Workloads that run outside of AWS, such as your on-premises servers, servers from other cloud providers, or managed continuous integration and continuous delivery (CI/CD) platforms, can still use temporary credentials. However, you'll need to deliver these temporary credentials to your workload. The following are ways you can deliver temporary credentials to your workloads: @@ -64 +64 @@ Workloads that run on outside of AWS, such as your on-premises servers, servers - * You can call the AWS AWS STS`AssumeRoleWithSAML` API to request temporary AWS credentials for your workload using a SAML assertion from an external identity provider (IdP) that is configured within your AWS account. + * You can call the AWS STS `AssumeRoleWithSAML` API to request temporary AWS credentials for your workload using a SAML assertion from an external identity provider (IdP) that is configured within your AWS account. @@ -66 +66 @@ Workloads that run on outside of AWS, such as your on-premises servers, servers - * You can call the AWS AWS STS `AssumeRoleWithWebIdentity` API to request temporary AWS credentials for your workload using a JSON web token (JWT) from an IdP that is configured within your AWS account. + * You can call the AWS STS `AssumeRoleWithWebIdentity` API to request temporary AWS credentials for your workload using a JSON web token (JWT) from an IdP that is configured within your AWS account.